cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1498
Views
0
Helpful
5
Replies
muhammednikhilmm
Beginner

with ironport (wsa) block skype

Hi ,

 

with cisco ironport (wsa) how to block skype ?

5 REPLIES 5
Lee Valentin
Beginner

Under Custom Policy Elements, you can create a custom url category called, 'BlockSkype' and add the custom category to your Global Access Policy for URL filtering and set it to Block.

 

Perhaps you can block it on your firewall. Skype uses random UDP ports outbound and reverts to using 443/80 if it doesn't find any available UDP ports. It becomes a bit of a task.

 

If you have an ASA, you can try to use a regex and MPF to block.

 

Good luck and please post your final fix.

 

I have integrated my iron port with AD and i want to block the skype for individual users. if my understanding is correct from the ASA it will block for globally. for all the users. 

 

is there any solution in iron port for this? 

Create an access policy and under Policy Member Definition > Selected Groups & Users you can add users or groups you want to add to this policy.

 

Next, under Advanced you can select what you want to block

 

Make sure this policy is towards the top of the list.

 

As stated previously, this will only block access to Skype website. If the application is already installed, you may not be able to block because the application uses random UDP ports and will default only to 443/80 in the event the other ports are not available.

 

You need an application aware firewall or an IPS appliance like the IPS for ASA, FirePower Services for ASA or a FirePower Appliance (Sourcefire)

 

The below link describes in more detail

 

http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118094-congifure-wsa-00.html

Hi Muhammed,

you can try this :

https://supportforums.cisco.com/discussion/11662391/ironport-skype-blocking

Hope it helps.

Regards,

alexdelangel
Beginner

Hello muhammed,

Were you able to block skype? Would you share the procedure with me? Or would anybody share the procedure with me?

Regards!

Content for Community-Ad